Wpgraphql

5 CVEs across 1 Wpgraphql products. Browse Wpgraphql vulnerabilities, severities, and proof-of-concept exploits.

Wpgraphql products with known CVEs

ProductCVEs
Wpgraphql5
Wpgraphql CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-40762High7.52026-06-15Unauthenticated SQL Injection in WPGraphQL < 2.11.1 versions.
CVE-2021-47959High7.52026-05-15WordPress Plugin WPGraphQL 1.3.5 contains a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending batche…
CVE-2025-68604Medium5.42026-05-07Cross-Site Request Forgery (CSRF) vulnerability in WPGraphQL allows Cross Site Request Forgery. This issue affects WPGraphQL: from n/a through 2.5.3.
CVE-2023-23684Medium4.42023-11-13Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5.
CVE-2019-25060Medium5.32022-05-09The WPGraphQL WordPress plugin before 0.3.5 doesn't properly restrict access to information about other users' roles on the affected site. Because of this, a r…